A Hybrid Post-Quantum Encryption Architecture with Self-Hosted Key Management for SME Cloud Data Protection
本文由 Muhammad Shaheer Bin Junaid 提出，针对中小企业（SME）在云存储场景中面临的后量子密码迁移困境。核心威胁是“先收割后解密”（harvest-now-decrypt-later）：攻击者现在即可收集云存储中
2026-08-31 归档
今日共收录 884 条安全情报，包含 132 个 CVE，408 篇安全通告，以及 86 篇研究论文。
← 返回归档列表Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
本文针对央行数字货币（CBDC）银行间结算系统在分布式账本技术（DLT）上面临的核心矛盾：区块链的透明性虽有助于无信任验证，但也会将所有参与者的双边交易流（如交易对手、金额、业务载荷）暴露给网络中的其他节点，造成商业敏感信息泄露。为此，作者
DisCTI: Who Needs to Know Timely? Automated Sector-Aware Cyber Threat Intelligence Dissemination
该论文针对网络威胁情报（CTI）分发中缺乏自动化和时效性行业映射的问题，提出了一种基于深度学习的解决方案。当前CTI数据量庞大且异构，安全分析师难以从中快速筛选出与自身行业相关的威胁信息。尽管现有平台如MISP提供部门标签功能（如能源、金融
From Security Events to Conflict States: A Three-layer Cyber Defense Scenario Model for Enhanced Cyber Situational Awareness
该论文面向任务关键型环境中的网络防御，提出了一种面向任务的三层网络防御框架，用于增强网络态势感知（CSA）与决策支持。研究背景是：在任务关键型运营域中，防御者需要在信息不完整且有噪声的观测条件下，持续估计不断变化的安全态势，同时保持关键任务
When Relationships Break: Interpreting Network Traffic Anomalies via Dependency Violations
该论文针对网络安全监控中基于机器学习的异常检测方法存在的可解释性不足问题展开研究。现有方法要么依赖特征归因技术但忽略特征间依赖关系，要么依赖因果建模但需要大量领域知识或计算资源。为此，作者提出 XION 方法，仅基于良性流量建模网络流特征之
Open5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruption
CVE-2026-82587
A vulnerability was determined in Open5GS up to 2.7.7. This vulnerability affects the function amf_namf_comm_decode_ue_m
Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field names
CVE-2026-78693
Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_graphql allows a remote cl
Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped read
CVE-2026-80223
Incorrect Authorization vulnerability in ash-project ash_graphql allows an authenticated subscriber in one tenant to rec
Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment
CVE-2026-81633
Improper Input Validation vulnerability in ash-project ash_graphql allows an unauthenticated client to crash a relay nod
Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notification
CVE-2026-81643
Incorrect Authorization vulnerability in ash-project ash_graphql delivers GraphQL subscription payloads for records a su
Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topic
CVE-2026-82367
Exposure of Data Element to Wrong Session vulnerability in ash-project ash_graphql can deliver one subscription's resolv
Cloaked plaintext leaks through a non-sensitive action argument in AshCloak
CVE-2026-81322
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ash-project ash_cloak allows anyone with acc
Unsafe deserialization of decrypted terms enables node DoS in AshCloak
CVE-2026-81319
Deserialization of Untrusted Data vulnerability in ash-project ash_cloak allows an attacker who can influence the bytes
Linux Foundation Magma gNB Termination ngap_amf.c denial of service
CVE-2026-82552
A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown
Linux Foundation Magma NGSetup ngap_amf_handlers.c state issue
CVE-2026-82551
A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap_amf_han
Linux Foundation Magma NGSetupRequest input validation
CVE-2026-82550
A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component N
Linux Foundation Magma SecurityModeComplete integrity check
CVE-2026-82549
A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component Securi
Linux Foundation Magma InitialUEMessage information disclosure
CVE-2026-82548
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the compo
Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authentication
CVE-2026-82547
A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks
Admidio before 5.0.12 Broken Access Control via profile_function.php
CVE-2026-82658
Admidio versions before 5.0.12 contain a broken access control vulnerability in profile_function.php that allows authent